CVEvulnerability

CVE-2013-10004

9.8 CRITICAL Published 2022-05-24 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2022-05-24
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-287, CWE-307

Description

A vulnerability classified as critical was found in Telecommunication Software SAMwin Contact Center Suite 5.1. This vulnerability affects the function passwordScramble in the library SAMwinLIBVB.dll of the component Password Handler. Incorrect implementation of a hashing function leads to predictable authentication possibilities. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component.

Affected configurations

• telecomsoftware samwin agent 5.01.19.06 • telecomsoftware samwin contact center 5.1

Related

Weakness · CWE (2)

  • CWE-287 Improper Authentication weakness
  • CWE-307 Improper Restriction of Excessive Authentication Attempts weakness

References